rich1.0npub1g5zswf6y48f7fy90jf3tlcuwdmjn8znhzaa4vkmtxaeskca8hpss23ms3lhttps://nostr.ae/npub1g5zswf6y48f7fy90jf3tlcuwdmjn8znhzaa4vkmtxaeskca8hpss23ms3lnjumphttps://nostr.ae📅 Original date posted:2020-03-10 📝 Original message: Good morning Rusty, et al., > Note that this means no payment secret is necessary, since the incoming > `blinding` serves the same purpose. If we wanted to, we could (ab)use > payment_secret as the first 32-bytes to put in Carol's enc1 (i.e. it's > the ECDH for Carol to decrypt enc1). I confess to not reading everything in detail, but it seems to me that, with payment point + scalar and path decorrelation, we need to establish a secret with each hop anyway (the blinding scalar for path decorrelation), so if you need a secret per hop, possibly this could be reused as well? Regards, ZmnSCPxj